Static task
static1
Behavioral task
behavioral1
Sample
6213b881ec9aa29bd22e9263f6597cce193ba8c9ebc287cc835cb96eb7d0c88b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6213b881ec9aa29bd22e9263f6597cce193ba8c9ebc287cc835cb96eb7d0c88b.exe
Resource
win10v2004-20230915-en
General
-
Target
6213b881ec9aa29bd22e9263f6597cce193ba8c9ebc287cc835cb96eb7d0c88b
-
Size
99KB
-
MD5
209341e5d51c075e4031497206c9a1e9
-
SHA1
909a99af4cc14d1255c8aca16bf31ee097aec49c
-
SHA256
6213b881ec9aa29bd22e9263f6597cce193ba8c9ebc287cc835cb96eb7d0c88b
-
SHA512
bc5ff589f957c39391a9f5325d666124696b00408c9f502ff11fc846223a63637f2bf7307954a06438be619bf273a207c94c5d78f0a392324a05aedbda896c2d
-
SSDEEP
768:ULOdNo/prVzu8o+cwurYurtCB5f32aygzU/OYsoOxDrzddAh/6ErtZpQSbWi3VTR:UqUpRto+3uRGVUclDHd1ks1DXlZNer
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6213b881ec9aa29bd22e9263f6597cce193ba8c9ebc287cc835cb96eb7d0c88b
Files
-
6213b881ec9aa29bd22e9263f6597cce193ba8c9ebc287cc835cb96eb7d0c88b.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 2.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 11KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 365KB - Virtual size: 364KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ